exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Ubuntu Security Notice USN-6742-1

Ubuntu Security Notice USN-6742-1
Posted Apr 22, 2024
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6742-1 - Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth devices could use this to subsequently impersonate one of the paired devices. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

tags | advisory, kernel, protocol
systems | linux, ubuntu
advisories | CVE-2023-24023
SHA-256 | 234102586def229a208c315fa397cd1db7c7bc4c31eab695d1718ef42f88ce93
Download | Favorite | View

Ubuntu Security Notice USN-6742-1

Change Mirror Download
==========================================================================
Ubuntu Security Notice USN-6742-1
April 19, 2024

linux, linux-aws, linux-aws-5.15, linux-azure-5.15, linux-azure-fde,
linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop,
linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15,
linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm,
linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi
vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure-fde: Linux kernel for Microsoft Azure CVM cloud systems
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gke: Linux kernel for Google Container Engine (GKE) systems
- linux-gkeop: Linux kernel for Google Container Engine (GKE) systems
- linux-ibm: Linux kernel for IBM cloud systems
- linux-intel-iotg: Linux kernel for Intel IoT platforms
- linux-kvm: Linux kernel for cloud environments
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-raspi: Linux kernel for Raspberry Pi systems
- linux-aws-5.15: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure-5.15: Linux kernel for Microsoft Azure cloud systems
- linux-azure-fde-5.15: Linux kernel for Microsoft Azure CVM cloud systems
- linux-gcp-5.15: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gkeop-5.15: Linux kernel for Google Container Engine (GKE) systems
- linux-hwe-5.15: Linux hardware enablement (HWE) kernel
- linux-ibm-5.15: Linux kernel for IBM cloud systems
- linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms
- linux-lowlatency-hwe-5.15: Linux low latency kernel
- linux-oracle-5.15: Linux kernel for Oracle Cloud systems

Details:

Daniele Antonioli discovered that the Secure Simple Pairing and Secure
Connections pairing in the Bluetooth protocol could allow an
unauthenticated user to complete authentication without pairing
credentials. A physically proximate attacker placed between two Bluetooth
devices could use this to subsequently impersonate one of the paired
devices. (CVE-2023-24023)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
   - JFS file system;
   - Netfilter;
(CVE-2024-26581, CVE-2023-52600, CVE-2023-52603)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
   linux-image-5.15.0-1043-gkeop   5.15.0-1043.50
   linux-image-5.15.0-105-generic  5.15.0-105.115
   linux-image-5.15.0-105-generic-64k  5.15.0-105.115
   linux-image-5.15.0-105-generic-lpae  5.15.0-105.115
   linux-image-5.15.0-1053-ibm     5.15.0-1053.56
   linux-image-5.15.0-1053-raspi   5.15.0-1053.56
   linux-image-5.15.0-1055-intel-iotg  5.15.0-1055.61
   linux-image-5.15.0-1057-gke     5.15.0-1057.62
   linux-image-5.15.0-1057-kvm     5.15.0-1057.62
   linux-image-5.15.0-1058-gcp     5.15.0-1058.66
   linux-image-5.15.0-1058-oracle  5.15.0-1058.64
   linux-image-5.15.0-1060-aws     5.15.0-1060.66
   linux-image-5.15.0-1061-azure-fde  5.15.0-1061.70.1
   linux-image-aws-lts-22.04       5.15.0.1060.60
   linux-image-azure-fde-lts-22.04  5.15.0.1061.70.39
   linux-image-gcp-lts-22.04       5.15.0.1058.53
   linux-image-generic             5.15.0.105.102
   linux-image-generic-64k         5.15.0.105.102
   linux-image-generic-lpae        5.15.0.105.102
   linux-image-gke                 5.15.0.1057.55
   linux-image-gke-5.15            5.15.0.1057.55
   linux-image-gkeop               5.15.0.1043.43
   linux-image-gkeop-5.15          5.15.0.1043.43
   linux-image-ibm                 5.15.0.1053.48
   linux-image-intel-iotg          5.15.0.1055.54
   linux-image-kvm                 5.15.0.1057.52
   linux-image-oracle-lts-22.04    5.15.0.1058.53
   linux-image-raspi               5.15.0.1053.50
   linux-image-raspi-nolpae        5.15.0.1053.50
   linux-image-virtual             5.15.0.105.102

Ubuntu 20.04 LTS:
   linux-image-5.15.0-1043-gkeop   5.15.0-1043.50~20.04.1
   linux-image-5.15.0-105-generic  5.15.0-105.115~20.04.1
   linux-image-5.15.0-105-generic-64k  5.15.0-105.115~20.04.1
   linux-image-5.15.0-105-generic-lpae  5.15.0-105.115~20.04.1
   linux-image-5.15.0-105-lowlatency  5.15.0-105.115~20.04.1
   linux-image-5.15.0-105-lowlatency-64k  5.15.0-105.115~20.04.1
   linux-image-5.15.0-1053-ibm     5.15.0-1053.56~20.04.1
   linux-image-5.15.0-1055-intel-iotg  5.15.0-1055.61~20.04.1
   linux-image-5.15.0-1058-aws     5.15.0-1058.64~20.04.1
   linux-image-5.15.0-1058-gcp     5.15.0-1058.66~20.04.1
   linux-image-5.15.0-1058-oracle  5.15.0-1058.64~20.04.1
   linux-image-5.15.0-1061-azure   5.15.0-1061.70~20.04.1
   linux-image-5.15.0-1061-azure-fde  5.15.0-1061.70~20.04.1.1
   linux-image-aws                 5.15.0.1058.64~20.04.1
   linux-image-azure               5.15.0.1061.70~20.04.1
   linux-image-azure-cvm           5.15.0.1061.70~20.04.1
   linux-image-azure-fde           5.15.0.1061.70~20.04.1.40
   linux-image-gcp                 5.15.0.1058.66~20.04.1
   linux-image-generic-64k-hwe-20.04  5.15.0.105.115~20.04.1
   linux-image-generic-hwe-20.04   5.15.0.105.115~20.04.1
   linux-image-generic-lpae-hwe-20.04  5.15.0.105.115~20.04.1
   linux-image-gkeop-5.15          5.15.0.1043.50~20.04.1
   linux-image-ibm                 5.15.0.1053.56~20.04.1
   linux-image-intel               5.15.0.1055.61~20.04.1
   linux-image-intel-iotg          5.15.0.1055.61~20.04.1
   linux-image-lowlatency-64k-hwe-20.04  5.15.0.105.115~20.04.1
   linux-image-lowlatency-hwe-20.04  5.15.0.105.115~20.04.1
   linux-image-oem-20.04           5.15.0.105.115~20.04.1
   linux-image-oem-20.04b          5.15.0.105.115~20.04.1
   linux-image-oem-20.04c          5.15.0.105.115~20.04.1
   linux-image-oem-20.04d          5.15.0.105.115~20.04.1
   linux-image-oracle              5.15.0.1058.64~20.04.1
   linux-image-virtual-hwe-20.04   5.15.0.105.115~20.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
   https://ubuntu.com/security/notices/USN-6742-1
   CVE-2023-24023, CVE-2023-52600, CVE-2023-52603, CVE-2024-26581

Package Information:
   https://launchpad.net/ubuntu/+source/linux/5.15.0-105.115
   https://launchpad.net/ubuntu/+source/linux-aws/5.15.0-1060.66
   https://launchpad.net/ubuntu/+source/linux-azure-fde/5.15.0-1061.70.1
   https://launchpad.net/ubuntu/+source/linux-gcp/5.15.0-1058.66
   https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1057.62
   https://launchpad.net/ubuntu/+source/linux-gkeop/5.15.0-1043.50
   https://launchpad.net/ubuntu/+source/linux-ibm/5.15.0-1053.56
   https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1055.61
   https://launchpad.net/ubuntu/+source/linux-kvm/5.15.0-1057.62
   https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1058.64
   https://launchpad.net/ubuntu/+source/linux-raspi/5.15.0-1053.56
   https://launchpad.net/ubuntu/+source/linux-aws-5.15/5.15.0-1058.64~20.04.1
   https://launchpad.net/ubuntu/+source/linux-azure-5.15/5.15.0-1061.70~20.04.1
 
https://launchpad.net/ubuntu/+source/linux-azure-fde-5.15/5.15.0-1061.70~20.04.1.1
   https://launchpad.net/ubuntu/+source/linux-gcp-5.15/5.15.0-1058.66~20.04.1
   https://launchpad.net/ubuntu/+source/linux-gkeop-5.15/5.15.0-1043.50~20.04.1
   https://launchpad.net/ubuntu/+source/linux-hwe-5.15/5.15.0-105.115~20.04.1
   https://launchpad.net/ubuntu/+source/linux-ibm-5.15/5.15.0-1053.56~20.04.1
 
https://launchpad.net/ubuntu/+source/linux-intel-iotg-5.15/5.15.0-1055.61~20.04.1
 
https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-5.15/5.15.0-105.115~20.04.1
 
https://launchpad.net/ubuntu/+source/linux-oracle-5.15/5.15.0-1058.64~20.04.1

Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    0 Files
  • 8
    May 8th
    0 Files
  • 9
    May 9th
    0 Files
  • 10
    May 10th
    0 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    0 Files
  • 14
    May 14th
    0 Files
  • 15
    May 15th
    0 Files
  • 16
    May 16th
    0 Files
  • 17
    May 17th
    0 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close